CVE-2014-0201: Undefined Security Weakness

ovirt-engine-reports, as used in the Red Hat Enterprise Virtualization reports package rhevm-reports before 3.3.3, uses world-readable permissions on configuration files, which allows local users to obtain sensitive information by reading the files...

ovirt-engine-reports: setup script logs database password in cleartext

The setup script in ovirt-engine-reports, as used in the Red Hat Enterprise Virtualization reports rhevm-reports package before 3.3.3, stores the reports database password in cleartext, which allows local users to obtain sensitive information by reading an unspecified file...

ovirt-engine-reports: various configuration files are world-readable

ovirt-engine-reports, as used in the Red Hat Enterprise Virtualization reports package rhevm-reports before 3.3.3, uses world-readable permissions on configuration files, which allows local users to obtain sensitive information by reading the files...

ovirt-engine-dwh: setup script logs database password in cleartext

The setup script in ovirt-engine-dwh, as used in the Red Hat Enterprise Virtualization Manager data warehouse rhevm-dwh package before 3.3.3, stores the history database password in cleartext, which allows local users to obtain sensitive information by reading an unspecified file...

oVirt会话固定漏洞

CVE ID:CVE-2014-0151 oVirt是一个虚拟化平台，一个易于使用的Web界面。 处理会话时的错误可被攻击者利用，通过欺骗用户登录特制链后，劫持其他用户的会话。 0 oVirt 3.x 目前没有详细解决方案： http://www.ovirt.org/Home...

oVirt跨站请求伪造漏洞

CVE ID:CVE-2014-0152 oVirt是一个虚拟化平台，一个易于使用的Web界面。 由于程序允许用户通过未验证的HTTP请求执行某些操作，攻击者可以利用漏洞在一个登录的用户访问恶意网站时将请求发送到REST API或GWT RPC的servlet。 0 oVirt 3.x 目前没有详细解决方案： http://www.ovirt.org/Home...

Fedora Update for rubygem-rbovirt FEDORA-2014-3573

Check for the Version of rubygem-rbovirt OpenVAS Vulnerability Test Fedora Update for rubygem-rbovirt FEDORA-2014-3573 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify...

Fedora Update for rubygem-rbovirt FEDORA-2014-3526

Check for the Version of rubygem-rbovirt OpenVAS Vulnerability Test Fedora Update for rubygem-rbovirt FEDORA-2014-3526 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify...

[SECURITY] Fedora 20 Update: rubygem-rbovirt-0.0.18-4.fc20

A Ruby client for oVirt REST API...

[SECURITY] Fedora 19 Update: rubygem-rbovirt-0.0.18-4.fc19

A Ruby client for oVirt REST API...

Important: Red Hat Security Advisory: rhev-hypervisor6 security and bug fix update

An updated rhev-hypervisor6 package that fixes one security issue and various bugs is now available. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

CVE-2013-4181

Cross-site scripting XSS vulnerability in the addAlert function in the RedirectServlet servlet in oVirt Engine and Red Hat Enterprise Virtualization Manager RHEV-M, as used in Red Hat Enterprise Virtualization 3 and 3.2, allows remote attackers to inject arbitrary web script or HTML via unspecifi...

CVE-2013-4181

CVE-2013-4181 is a reflected cross-site scripting (XSS) vulnerability in the addAlert function of the RedirectServlet used by oVirt Engine and Red Hat Enterprise Virtualization Manager (RHEV-M) in Red Hat Enterprise Virtualization 3 and 3.2. The issue allows an attacker to cause the user’s browse...

CVE-2013-4181: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the addAlert function in the RedirectServlet servlet in oVirt Engine and Red Hat Enterprise Virtualization Manager RHEV-M, as used in Red Hat Enterprise Virtualization 3 and 3.2, allows remote attackers to inject arbitrary web script or HTML via unspecifi...

PT-2013-4889 · Ovirt +1 · Ovirt Engine +1

Name of the Vulnerable Software and Affected Versions: oVirt Engine and Red Hat Enterprise Virtualization Manager RHEV-M versions 3 and 3.2 Description: A cross-site scripting XSS issue exists in the addAlert function within the RedirectServlet servlet. This allows remote attackers to inject...

ovirt-engine: RedirectServlet cross-site scripting flaw

Cross-site scripting XSS vulnerability in the addAlert function in the RedirectServlet servlet in oVirt Engine and Red Hat Enterprise Virtualization Manager RHEV-M, as used in Red Hat Enterprise Virtualization 3 and 3.2, allows remote attackers to inject arbitrary web script or HTML via unspecifi...

Important: Red Hat Security Advisory: rhev-hypervisor6 security and bug fix update

An updated rhev-hypervisor6 package that fixes one security issue and various bugs is now available. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

Important: Red Hat Security Advisory: rhev-hypervisor6 security and bug fix update

An updated rhev-hypervisor6 package that fixes two security issues and various bugs is now available. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...

Important: Red Hat Security Advisory: rhev-hypervisor6 security and bug fix update

An updated rhev-hypervisor6 package that fixes several security issues and various bugs is now available. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...

Fedora 17 : mom-0.3.0-1.fc17 (2012-15496)

Update to mom-0.3.0 which fixes a momd security issue and includes many features for ovirt integration. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much a...